[whinlatter,3/3] vim: ignore CVE-2025-66476

Message ID	20260206105643.2636897-3-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.215.170, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [OE-core][whinlatter][PATCH 3/3] vim: ignore CVE-2025-66476 Date: Fri, 6 Feb 2026 23:56:43 +1300 Message-ID: <20260206105643.2636897-3-ankur.tyagi85@gmail.com> In-Reply-To: <20260206105643.2636897-1-ankur.tyagi85@gmail.com> References: <20260206105643.2636897-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[whinlatter,1/3] avahi: Backport fix CVE-2025-68276 \| expand [whinlatter,1/3] avahi: Backport fix CVE-2025-68276 [whinlatter,2/3] avahi: patch CVE-2026-24401 [whinlatter,3/3] vim: ignore CVE-2025-66476

Message ID

20260206105643.2636897-3-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-core@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [OE-core][whinlatter][PATCH 3/3] vim: ignore CVE-2025-66476
Date: Fri,  6 Feb 2026 23:56:43 +1300
Message-ID: <20260206105643.2636897-3-ankur.tyagi85@gmail.com>
In-Reply-To: <20260206105643.2636897-1-ankur.tyagi85@gmail.com>
References: <20260206105643.2636897-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[whinlatter,1/3] avahi: Backport fix CVE-2025-68276 | expand

Commit Message

Ankur Tyagi Feb. 6, 2026, 10:56 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Details https://nvd.nist.gov/vuln/detail/CVE-2025-66476

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta/recipes-support/vim/vim_9.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-support/vim/vim_9.1.bb b/meta/recipes-support/vim/vim_9.1.bb
index fee9f055e9..c492342ffb 100644
--- a/meta/recipes-support/vim/vim_9.1.bb
+++ b/meta/recipes-support/vim/vim_9.1.bb
@@ -21,3 +21,5 @@  ALTERNATIVE_LINK_NAME[xxd] = "${bindir}/xxd"
 # in many places for _FORTIFY_SOURCE=2.  Security flags become part of CC.
 #
 lcl_maybe_fortify = "${@oe.utils.conditional('DEBUG_BUILD','1','','-D_FORTIFY_SOURCE=1',d)}"
+
+CVE_STATUS[CVE-2025-66476] = "not-applicable-platform: Issue only applies on Windows"

[whinlatter,3/3] vim: ignore CVE-2025-66476

Commit Message

Patch